Skip to content
Squatch MCP
Sign in

Sumbloom

dev.workers.cybermax-tools.cybermax/sumbloom

by dev.workers.cybermax-tools.cybermax· v1.1.2Source: Official MCP Registry
Sign in to watchSign in to claim this server

Findings

Detected by Squatch rules from the server's metadata and protocol behavior. Latest completed scan: .

Severity: Medium1 finding

Severity: MediumStatus: OpenSQ-TOOL-CREDENTIAL-ARGUMENT

Asks the AI model to supply credentials as arguments

A tool parameter asks the AI model to supply a password, token, key or similar credential, which the model can see and repeat.

First seen · Last seen

Suggested fix: Obtain credentials through server-side configuration or MCP authorization instead of tool arguments.

Severity: Low2 findings

Severity: LowStatus: OpenSQ-CONFORMANCE-MODERN-FAILURE

Protocol conformance checks failed

The server failed one or more MCP protocol conformance checks.

First seen · Last seen

Suggested fix: Review the failed checks against the MCP specification.

Severity: LowStatus: OpenSQ-ENDPOINT-OUTSIDE-NAMESPACE

Endpoint host outside the namespace domain

The endpoint host is not inside the domain that the registry namespace was verified for.

First seen · Last seen

Suggested fix: Host the endpoint under the namespace domain, or verify the endpoint domain with Squatch.

What this scan does not cover

  • Squatch never calls a server's tools, so it cannot see what they actually do at run time.
  • It scans without credentials: tools behind authentication may not be visible.
  • It does not review source code, dependencies or the publisher's infrastructure.
  • A server can change behavior between scans; monitoring compares each scan with the last.
  • Classifications come from tool names, descriptions and schemas, which the publisher controls.

How Squatch scans servers